Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4a7816e5-2f16-310b-bb82-832fbcd08aee.roa
File:                     4a7816e5-2f16-310b-bb82-832fbcd08aee.roa (raw, json)
Hash identifier:          Z9LTgI0glyma0GgiAWQmr/kUJTBSZcSXuHcJYfKAaq4=
Subject key identifier:   26:B3:68:FC:6F:4E:24:03:08:84:55:2C:19:82:4C:F9:9E:CB:5F:EF
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A00DB1FDB1359C4C73C70F280
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4a7816e5-2f16-310b-bb82-832fbcd08aee.roa
Signing time:             Wed 28 May 2025 13:01:04 +0000
ROA not before:           Wed 28 May 2025 13:01:04 +0000
ROA not after:            Tue 26 Aug 2025 13:01:04 +0000
asID:                     397207
IP address blocks:        2001:500:124::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:00:db:1f:db:13:59:c4:c7:3c:70:f2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 28 13:01:04 2025 GMT
            Not After : Aug 26 13:01:04 2025 GMT
        Subject: CN=d8dc39b4-3176-41f9-8feb-5567c40eed98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:7c:5e:e8:ab:14:b4:e4:85:41:a5:bc:9f:2c:
                    2e:62:ae:7b:46:47:32:e2:58:e7:67:ba:fb:8f:f7:
                    f6:67:7d:86:b9:1d:1c:1f:e9:b2:f5:5f:69:93:a5:
                    3b:60:88:eb:ad:62:ba:86:04:e0:6a:98:ce:59:53:
                    93:41:82:30:7b:53:bd:ea:cd:4c:cc:31:d7:85:50:
                    11:33:b9:7c:0e:1c:47:10:40:d6:d0:52:7d:cd:8a:
                    18:da:48:32:bf:49:17:42:3e:c7:3e:cc:52:e5:4e:
                    69:14:63:50:8c:d7:2d:a5:ff:b0:0d:2c:49:ea:9b:
                    51:a2:c2:d5:0c:01:63:54:57:e8:5e:8d:9f:a5:ba:
                    03:34:ac:1f:9b:4b:f2:de:27:09:62:54:72:37:31:
                    f0:8b:c0:f4:1b:41:84:83:83:66:3f:19:af:3d:b1:
                    bb:9b:df:b9:7e:b2:62:0c:3d:8a:63:1c:22:b6:07:
                    cd:7d:89:5a:2f:73:8d:1b:bd:fb:f9:71:ba:6e:45:
                    18:f7:3a:46:d0:26:21:1f:18:7d:41:a8:fa:b6:49:
                    cf:d7:43:fd:5a:48:9f:85:eb:61:de:81:7e:2c:23:
                    6a:59:3c:ec:4c:fe:50:6a:e5:d3:5e:fe:b2:7b:ad:
                    1a:5b:b6:c3:d7:e9:5b:c8:17:3f:f3:d1:6d:03:fe:
                    2d:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:B3:68:FC:6F:4E:24:03:08:84:55:2C:19:82:4C:F9:9E:CB:5F:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4a7816e5-2f16-310b-bb82-832fbcd08aee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:124:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:02:7f:e3:6a:02:8e:b8:6a:f6:a0:6d:3b:c2:43:3c:a7:79:
         da:15:14:5c:95:54:31:eb:c5:fe:bf:67:74:6f:1d:30:78:c9:
         81:07:ba:a1:42:6a:06:63:ea:41:71:13:f1:44:bd:2f:79:be:
         8d:b2:5c:0d:96:c9:e1:b4:5c:99:43:98:37:34:99:82:da:61:
         cf:97:5b:81:9b:a1:f5:9b:ee:78:85:7e:a7:b5:72:38:17:3b:
         f2:36:5d:6f:1a:7c:e7:b9:7c:74:a3:9e:14:22:ef:ba:20:5c:
         e2:a2:0b:08:6f:e8:30:40:8c:5a:0f:6b:4d:89:75:f2:02:5a:
         16:62:f5:b9:ed:74:f2:12:81:6a:90:ae:c8:96:55:5a:76:da:
         8b:86:ca:0f:9d:e3:ed:c4:c5:26:fe:b6:e2:29:a5:cc:0e:df:
         b5:45:14:a7:ea:20:58:d2:ea:e1:f8:a5:e3:1b:71:b8:6e:9b:
         dd:e4:d4:e0:ab:2d:2c:a2:62:7a:c0:14:2e:a8:da:1d:af:40:
         37:cb:1f:e4:8d:53:04:2d:23:48:7c:9e:1d:6d:00:3d:28:88:
         8c:99:42:d4:e8:6b:bf:fa:50:dc:3e:ce:f0:87:c2:41:49:f8:
         98:fc:d3:e5:3d:2c:91:0c:3b:54:6b:c7:c9:29:98:72:53:4b:
         85:dc:13:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 13:00:59 2025 by rpki-client